{"id":"CVE-2019-13147","aliases":["AZL-43801","AZL-44760","DEBIAN-CVE-2019-13147","DLA-3650-1","DLA-4255-1","EUVD-2019-4678","GHSA-f72j-hf57-7h84","MGASA-2023-0347","OESA-2026-1782","OESA-2026-1783","OESA-2026-1784","OESA-2026-1785","OESA-2026-1786","SUSE-SU-2025:01559-1","SUSE-SU-2025:02283-1","SUSE-SU-2025:1559-1","UBUNTU-CVE-2019-13147","USN-6558-1","openSUSE-SU-2025:15150-1"],"status":"published","title":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in...","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01913,"percentile":0.79974,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-07-01T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:12","package":"audiofile","fixed_in":["0.3.6-5+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"audiofile","fixed_in":["0.3.6-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"audiofile","fixed_in":["0.3.6-6"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"audiofile","fixed_in":["0.3.6-14.mga9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"audiofile","fixed_in":["0.3.6-2ubuntu0.14.04.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"audiofile","fixed_in":["0.3.6-2ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"audiofile","fixed_in":["0.3.6-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"audiofile","fixed_in":["0.3.6-5+deb10u1build0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"audiofile","fixed_in":["0.3.6-5+deb10u1build0.22.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"audiofile","fixed_in":["0.3.6-16.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.3.6-27"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.3.6-27"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb12u1"}]}],"versions":["0.3.6-5"]},{"source":"osv","ecosystem":"Debian:13","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-6"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb10u1"}]}],"versions":["0.3.6-5"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb11u1"}]}],"versions":["0.3.6-5"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-14.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-30.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-30.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-30.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-29.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-30.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-11.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-2ubuntu0.14.04.3+esm1"}]}],"versions":["0.3.6-2","0.3.6-2ubuntu0.14.04.1","0.3.6-2ubuntu0.14.04.2","0.3.6-2ubuntu0.14.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-2ubuntu0.16.04.1+esm1"}]}],"versions":["0.3.6-2","0.3.6-2ubuntu0.15.10.1","0.3.6-2ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-4ubuntu0.1~esm1"}]}],"versions":["0.3.6-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb10u1build0.20.04.1"}]}],"versions":["0.3.6-5","0.3.6-5build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb10u1build0.22.04.1"}]}],"versions":["0.3.6-5build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.6-5build2","0.3.6-6","0.3.6-6build1","0.3.6-6build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.6-7build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.6-7build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.6-7build1","0.3.6-7build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-2ubuntu0.14.04.3+esm1"}]}],"versions":["0.3.6-2","0.3.6-2ubuntu0.14.04.1","0.3.6-2ubuntu0.14.04.2","0.3.6-2ubuntu0.14.04.3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-2ubuntu0.16.04.1+esm1"}]}],"versions":["0.3.6-2","0.3.6-2ubuntu0.15.10.1","0.3.6-2ubuntu0.16.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-4ubuntu0.1~esm1"}]}],"versions":["0.3.6-4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb10u1build0.20.04.1"}]}],"versions":["0.3.6-5","0.3.6-5build1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb10u1build0.22.04.1"}]}],"versions":["0.3.6-5build1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"audiofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-16.1"}]}]}],"products":[{"vendor":"audiofile","product":"audiofile"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://github.com/mpruett/audiofile/issues/54","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00006.html","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00020.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13147","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-f72j-hf57-7h84"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13147","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0347.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32608","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50950","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1783","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1784","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1785","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1786","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501559-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140031","tags":["report"]},{"url":"https://bugzilla.suse.com/1196487","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24599","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502283-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251559-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-13147","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6558-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-13440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24599","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3ZNMUKZNIFKGWTKGEVWOT432KS3HE5PB/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-13147","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-01T00:00:00Z","modified":"2025-11-03T19:25:23.948Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-4678","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-01T00:00:00Z","modified":"2025-11-03T19:25:23Z","updated_at":"2026-11-02T19:49:34.152725Z"}],"ghsa":[{"id":"GHSA-f72j-hf57-7h84","title":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in...","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2022-05-24T16:49:15Z","modified":"2025-11-03T21:30:30Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:18.176646Z"}],"nvd":[{"id":"CVE-2019-13147","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-02T00:15:10.397Z","modified":"2026-06-17T02:16:09.85Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"AZL-43801","title":"CVE-2019-13147 affecting package audiofile 0.3.6-27","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-02T00:15:10Z","modified":"2026-04-21T04:31:09.582848Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44760","title":"CVE-2019-13147 affecting package audiofile 0.3.6-27","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-02T00:15:10Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"CVE-2019-13147","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-02T00:15:10.397Z","modified":"2026-10-20T10:50:41.362572008Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-13147","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-02T00:15:10.397Z","modified":"2026-09-21T07:02:18.747025667Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"OESA-2026-1782","title":"audiofile security update","description":"The Audio File Library is a C-based library for reading and writing audio files in many common formats.\r\n\r\nSecurity Fix(es):\n\nIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.(CVE-2019-13147)\n\nAudiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.(CVE-2025-50950)","status":"published","published":"2026-03-27T11:10:48Z","modified":"2026-08-18T01:19:43.949406764Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1783","title":"audiofile security update","description":"The Audio File Library is a C-based library for reading and writing audio files in many common formats.\r\n\r\nSecurity Fix(es):\n\nIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.(CVE-2019-13147)\n\nAudiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.(CVE-2025-50950)","status":"published","published":"2026-03-27T11:10:48Z","modified":"2026-08-18T01:19:43.922198732Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1784","title":"audiofile security update","description":"The Audio File Library is a C-based library for reading and writing audio files in many common formats.\r\n\r\nSecurity Fix(es):\n\nIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.(CVE-2019-13147)\n\nAudiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.(CVE-2025-50950)","status":"published","published":"2026-03-27T11:10:48Z","modified":"2026-08-18T01:19:44.099192121Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1785","title":"audiofile security update","description":"The Audio File Library is a C-based library for reading and writing audio files in many common formats.\r\n\r\nSecurity Fix(es):\n\nIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.(CVE-2019-13147)\n\nAudiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.(CVE-2025-50950)","status":"published","published":"2026-03-27T11:10:48Z","modified":"2026-08-18T01:19:44.009560862Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1786","title":"audiofile security update","description":"The Audio File Library is a C-based library for reading and writing audio files in many common formats.\r\n\r\nSecurity Fix(es):\n\nIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.(CVE-2019-13147)\n\nAudiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.(CVE-2025-50950)","status":"published","published":"2026-03-27T11:10:48Z","modified":"2026-08-18T01:19:44.036969938Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"UBUNTU-CVE-2019-13147","description":"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.","status":"published","published":"2019-07-02T00:15:00Z","modified":"2026-10-17T12:55:31.598151867Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DLA-3650-1","title":"audiofile - security update","status":"published","published":"2023-11-12T00:00:00Z","modified":"2026-03-09T01:23:32.699699Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4255-1","title":"audiofile - security update","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-03-09T02:09:43.50508Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0347","title":"Updated audiofile packages fix a security vulnerability","description":"2 patches are added to audiofile source to correct a vulnerability.\nIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL\npointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a\nthat allows an attacker to cause a denial of service via a crafted file.\n(CVE-2019-13147)\n","status":"published","published":"2023-12-15T17:57:51Z","modified":"2026-04-16T04:40:36.059301518Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2025:15150-1","title":"audiofile-0.3.6-16.1 on GA media","description":"These are all security issues fixed in the audiofile-0.3.6-16.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-23T00:00:00Z","modified":"2026-03-23T04:53:24.663973Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01559-1","title":"Security update for audiofile","description":"This update for audiofile fixes the following issues:\n\n- CVE-2019-13147: Fixed NULL pointer dereference in ulaw2linear_buf that could lead to DOS (bsc#1140031).\n- CVE-2022-24599: unverified user input when processing audio files can lead to information leak (bsc#1196487).\n","status":"published","published":"2025-06-12T14:50:15Z","modified":"2026-02-04T03:08:43.917488Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:02283-1","title":"Security update for audiofile","description":"This update for audiofile fixes the following issues:\n\n- CVE-2019-13147: Do not allow too many channel to prevent NULL pointer dereference (bsc#1140031).\n- CVE-2022-24599: Clear buffer when allocating (bsc#1196487).\n","status":"published","published":"2025-07-11T08:35:16Z","modified":"2025-07-12T13:02:22.896799Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:1559-1","title":"Security update for audiofile","description":"This update for audiofile fixes the following issues:\n\n- CVE-2019-13147: Fixed NULL pointer dereference in ulaw2linear_buf that could lead to DOS (bsc#1140031).\n- CVE-2022-24599: unverified user input when processing audio files can lead to information leak (bsc#1196487).\n","status":"published","published":"2025-05-15T11:19:22Z","modified":"2026-03-23T04:48:07.261805Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6558-1","title":"audiofile vulnerabilities","description":"It was discovered that audiofile could be made to dereference invalid\nmemory. If a user or an automated system were tricked into opening a\nspecially crafted file, an attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu\n18.04 LTS. (CVE-2018-13440)\n\nIt was discovered that audiofile could be made to write out of bounds. If a\nuser or an automated system were tricked into opening a specially crafted\nfile, an attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 16.04\nLTS and Ubuntu 18.04 LTS. (CVE-2018-17095)\n\nIt was discovered that audiofile could be made to dereference invalid\nmemory. If a user or an automated system were tricked into opening a\nspecially crafted file, an attacker could possibly use this issue to cause\na denial of service. (CVE-2019-13147)\n\nIt was discovered that audiofile could be made to leak memory. If a user or\nan automated system were tricked into opening a specially crafted file, an\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-24599)\n","status":"published","published":"2023-12-14T16:44:57Z","modified":"2026-06-29T13:51:00.143480719Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}